Martin Willi 5617c6cd6f nl80211: Allow privileged operations from user namespaces
While a wiphy can be transferred to network namespaces, a process having
CAP_NET_ADMIN in a non-initial user namespace can not administrate such
devices due to the genetlink GENL_ADMIN_PERM restrictions.

For openvswitch having the same issue, a new GENL_UNS_ADMIN_PERM flag has
been introduced, commit 4a92602aa1cd ("openvswitch: allow management from
inside user namespaces"). This patch changes all privileged operations
operating on a wiphy, dev or wdev to allow their administration using the
same mechanism. All operations use either NEED_WIPHY, NEED_WDEV or
NEED_NETDEV, which implies a namespace aware lookup of the device. The only
exception is NL80211_CMD_SET_WIPHY, which explicitly uses a namespace aware
phy lookup.

Signed-off-by: Martin Willi <martin@strongswan.org>
[also allow cancel scan, for completeness]
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
2016-05-31 11:36:34 +02:00
..
2016-04-13 10:41:10 +02:00
2016-03-10 20:54:09 -05:00
2016-03-17 21:05:01 -04:00
2016-05-11 19:36:28 -04:00
2016-03-09 16:36:15 -05:00
2015-10-23 03:05:19 -07:00
2016-05-12 11:46:58 -04:00
2016-04-14 16:23:40 -04:00
2016-05-13 01:43:52 -04:00
2016-05-08 23:46:14 -04:00